CVE-2008-0864
Summary
| CVE | CVE-2008-0864 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-02-21 01:44:00 UTC |
| Updated | 2018-10-30 16:25:00 UTC |
| Description | Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bea Systems | Weblogic Portal | 8.1_sp6 | All | All | All |
| Application | Bea Systems | Weblogic Portal | 8.1_sp6 | All | All | All |
| Application | Oracle | Weblogic Portal | 8.1 | sp3 | All | All |
| Application | Oracle | Weblogic Portal | 8.1 | sp4 | All | All |
| Application | Oracle | Weblogic Portal | 8.1 | sp5 | All | All |
| Application | Oracle | Weblogic Portal | 8.1 | sp3 | All | All |
| Application | Oracle | Weblogic Portal | 8.1 | sp4 | All | All |
| Application | Oracle | Weblogic Portal | 8.1 | sp5 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| WebLogic Portal Administrative Policy Errors May Let Remote Users Access Restricted Pages - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Oracle Fusion Middleware Technologies | BEA | dev2dev.bea.com | |
| About Secunia Research | Flexera | SECUNIA | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.